Unrated
Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.
CVE-2019-12422
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2019-12422 shiro
Original description The description as published by the source.
Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- web lists.apache.org
- web lists.apache.org